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Abstract. We give a construction of unramified cyclic octic extensions of 
certain complex quadratic number fields. The binary quadratic form used in 
this construction also shows up in the theory of 2-descents on Pell conies and 
elliptic curves, as well as in the explicit description of cyclic quartic extensions. 
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Introduction 

In this article we discuss several apparently unrelated problems involving integers 
of the form m — a 2 + Ab 2 = 1 mod 4. A central role in the solution of these 
problems is played by the family of binary quadratic forms Qb = (6, a, —b) with 
discriminant m; here and below, Q = (A, B, C) denotes the binary quadratic form 
Q(X, Y) = AX 2 + BXY + CY 2 with discriminant A = B 2 - AAC. 

The first problem concerns the solvability of the negative Pell equation 

T 2 - mil 2 = -A 

and the computation of its fundamental solution. Results going back to Euler [16] 
show that such a solution can be computed from an integral solution of the equation 
Qb(r,s) = 1. 

The second problem is the explicit construction of octic cyclic unramified ex- 
tensions L/k of the quadratic number field k = Q(y/—- m). The construction of 
its quartic subextension K = k(i, \fa + 2bi ) is almost trivial, and we will see that 
explicit generators \x of the quadratic extension L — K(^/Jl) can be written down 
explicitly using nontrivial solutions of the diophantine equation Qb(r, s) — 2x 2 . 

Afterwards we will briefly explain why the forms Qb also play a role in performing 
2-descent on certain families of elliptic curves, such as those of the form E : y 2 = 
x(x 2 + p), where p = a 2 + 46 2 is prime; here the existence of rational points on E 
is tied to the pair of equations r 2 + s 2 = X 2 and Qb(r, s) = Y 2 . 

Finally we mention a few other problems in which these forms Qb have shown up. 
It is clear that most of the problems discussed here may be generalized considerably. 
In particular, studying Pell descent or Hilbert 2-class fields should by no means be 
restricted to the special cases of the negative Pell equation or discriminants of the 
form —4m. 

This article is written in the language of quadratic forms (although ideals show 
up occasionally). For understanding the results it is sufficient to know the most 
elementary basics; for readers who would like to read more about reduction and 
composition of forms, I strongly recommend the books by Flath [T7j and Cox [TI] . 
as well as the recent contributions by Bhargava [9]. The first section of [31] gives 
a brief introduction to Bhargava's ideas, and a detailed elementary account can be 
found in Barkcr-Hoyt's thesis [S]. 
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1. The Quadratic Space of Binary Quadratic Forms 

Before we start investigating examples of descent on Pell conies, let us show how 
the main actor in our play shows up in a more general setting. 

Let R be a domain with characteristic ^ 2, and consider the set B = Br of 
binary quadratic forms Q(X,Y) = AX 2 + BXY + CY 2 , often abbreviated by 
Q = (A, B, C), with A,B,C £ R. We define a bilinear map B x B — > R via 

(Qu Qa> = B 1 B 2 - 2A 1 B 2 - 2A 2 B U 

where Q 3 = (Aj,Bj,Cj) G B. Clearly (Q 1 ,Q 2 ) = {Q2, Ql), and (Q, Q) = disc(Q) = 
B 2 — 4 AC is the discriminant of Q. 

Matrices S = ( \ * ) G SL 2 (i?) act on B via Q\s = Q' ', where 

(1) Q'{x, y) = Q((x, y)S') = Q(rx + sy, tx + uy), 

(here S' denotes the transpose of S). It is an easy exercise to show that 

(2) (Qi\s,Q2) = (Qi,Q2\s>) 

for S € SL 2 (Q). This identity is the essential content of the "Cantor diagrams" in 
[31 Thm. 2], QUI Prop. 3.3], and QU Thm. 2]. 

From now on assume that R = Z. If the form Q\ — (1, 0, — m) represents —1, say 
r 2 — ms 2 = —1, then Q 2 = (ms,2r, s) is a form with discriminant —4. Therefore 
Q 2 is equivalent to (1,0,1), say Q 2 = (1,0, 1) |s for some S G SL 2 (Z). Write 
Qi\s' — (a, 2i»i , c) for integers a, b%, c; then Equation ([2| shows that a + c = 0, i.e., 
Qils' = ( a i 26x, —a). Since Qi and Q\\s' both have discriminant 4m, we must have 
m = a 2 + b 2 . Observe that we have shown that if (1,0, — m) represents — 1, then 
to = a 2 + b 2 is a sum of two squares. 

Replacing the principal form (1, 0, —a) with discriminant 4a by Qq = (1, 1, =7^) 
with discriminant a = a 2 + Ab 2 = 1 mod 4 results in replacing (a, 2&i,— a) by 
Qh = (b,a,—b). This is the form that will play a central role in the problems 
described below: performing a second descent on Pell conies and elliptic curves, 
constructing Hilbert class fields of quadratic number fields with discriminant — 4to, 
or in Hasse's description of the arithmetic of cyclic quartic number fields. 

The pair of orthogonal forms Q\ — (1, 0, 1) and Q 2 — (6, a, —6) will occur explic- 
itly in our description of the second 2-descent on the elliptic curve y 2 — x(x 2 — 4p) 
for primes p = a 2 +4b 2 . In fact we will see that finding a rational point on E is equiv- 
alent to finding a simultaneous representation Qi(r, s) — X 2 and Q 2 (r, s) = Y 2 of 
squares by these forms. 

This problem can be reformulated as follows. Let Q — (A, B, C) G Br be a 
binary quadratic form over a domain R as above, and let F be the quotient field 
of R. We can evaluate Q on P 1 ^ as follows: for each point P = [x : y] £ P 1 ^ 
we set P = Q(x,y) with values in F x /F x2 . Given a pair (Qi,Q 2 ) of orthogonal 
forms, the pair of simultaneous equations Qi(r, s) = X 2 and Q 2 (r, s) — Y 2 is now 
equivalent to the existence of a point P G V 1( Q with Q±(P) = Q 2 {P) = 1. 

2. 2-Descent on Pell Conics 
Let to = An + 1 be a squarefree integer, and consider the Pell equation 

(3) Qo(T, U) = T 2 — TU - nil 2 = 1, 

where Q Q (X,Y) = X 2 — XY — nY 2 is the principal binary quadratic form with 
discriminant An + 1 = m. 
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Multiplying through by 4 and completing the square shows that this equation 
can also be written in the more familiar way 

(2T- U) 2 -mU 2 = 4. 

2.1. First 2-Descent. In this section we will present methods for finding a non- 
trivial integral solution of ([3| as well as criteria for the solvability of the negative 
Pell equation 

(4) Q (T,U) = -1. 

To this end we write the Pell equation (2T — U) 2 — mU 2 = 4 in the form 

mU 2 = (2T - U) 2 - 4 = (2T - U - 2)(2T — 17 + 2). 
Now 

g cd(2T-c/-2 ) 2T- f / + 2 ) = ^ *™°™> 

II if U is odd; 

in both cases we find that there exist integers c, d, r, s with cd = m and 2T—U + 2 = 
cr 2 and 2T - U - 2 = ds 2 , and so cr 2 - ds 2 = 4. 

The fact that r = s mod 2 allows us to make the substitution s = S and r = 
2R — S, which transforms the equation cr 2 — ds 2 = 4 into 

(5) cR 2 -cRS+ C — S 2 = l. 

4 

Observe that the quadratic form cx 2 — dy 2 has discriminant Acd = 4m, whereas the 
form on the left hand side of |5j has discriminant c 2 — c(c — d) — cd = m. 

Thus each integral solution of the Pell equation comes from a solution of one 
of the equations ([5| for some factorization cd = m (see [30] for details). In fact, 
Legendre claimed and Dirichlet proved that exactly four among these equation^] 
have solutions in integers: 

Proposition 1. First 2-descent on Pell conies: If m = a 2 + 4b 2 = pi ■ ■ ■ Pt is a 

product of t disctinct primes pj = 1 mod 4, then among the 2 t+1 descendants ^ 
with cd — m there are exactly four that have solutions in integers. 

In particular, apart from the trivial descendants 1 = x 2 —my 2 and 1 = —mx 2 +y 2 
there is a unique nontrivial pair (c, d) with cd = m such that 1 = cx 2 — dy 2 and 
1 = —dx 2 + cy 2 have integral solutions. 

Special Cases. If m = p is prime, all four factorizations of m must lead to solvable 
equations. In particular, T 2 — pU 2 = — 1 is solvable in integers. This result is due 
to Legendre. 

If m = pq for primes p = q = 1 mod 4, we have the following essentially different 
descendants, written using forms with discriminant 4pq: 

x 2 — pqy 2 = 4, pqx 2 — y 2 — 4, px 2 — qy 2 — 4, qx 2 — py 2 = 4. 

If (£) = —1, it is immediately clear that the last two equations do not have rational 
(let alone integral) solutions; this implies 

Corollary 2. If p = q = 1 mod 4 are primes with (2) = —1, the negative Pell 
equation Q) is solvable in integers. 



If m = 5, for example, the solvable equations correspond to the factorizations (c, d) = (1,5), 
(5, 1), (— 1, —5), and (—5, —1)- If m = 34, on the other hand, the solvable equations come from 
(c, d) = (1, 34), (-34, -1), (2, 17) and (-17, -2). 
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If (|) = 1, on the other hand, further descents are necessary for deciding which 
of the equations ([5| are solvable. 

2.2. Second 2-Descent. Let us show how to do such a second descent. We start 
with the equation T 2 — mil 2 = —4 and assume that it has an integral solution. 
Then mil 2 = T 2 + 4 = (T + 2i)(T - 2i). 

Now T is easily seen to be either odd or divisible by 4. Thus gcd(T+2i, T—2i) = 1 
in the first and gcd(T + 2i, T — 2i) — 2i = (1 + i) 2 in the second case. This shows 
that we must have pp 2 = j(T + 2i) for some unit j = i k and some p, p € Z[i] with 
pp = m and pp = u. Subsuming j into p then gives pp 2 = T + 2i. 

A simple calculation shows that p = 1 mod 2; writing p — a + 26i (recall that 
m = pjl — a 2 + 46 2 ) and p = x + yi, and comparing real and imaginary parts we 
find that 

T = ax 2 — Abxy — ay 2 , 1 = bx 2 + axy — by 2 . 
We have proved the following 

Proposition 3. Let m be an odd squarefree natural number. The negative Pell 
equation has an integral solution if and only if there exist integers a, b € N with 
m = a 2 + Ab 2 such that the diophantine equation 

(6) Qb{x,y) = bx 2 + axy- by 2 = 1 

has an integral solution. In this case, 

T = ax 2 — Abxy — ay 2 , U — x 2 + y 2 

is a solution of the original equation Qq(T) = — 1 . 

Example 1. Let m = 41 = 5 2 + 4 ■ 2 2 ; for checking the solvability of T 2 - TU - 
10U 2 = —1 we have to consider Q(r, s) = 2x 2 +5xy — 2y 2 = 1. We find the solution 
x = 3, y = -1, hence T = 5 • 3 2 + 8 • 3 - 5 = 64 and U = 3 2 + l 2 = 10. Thus 
(T, U) — (64, 10) is the fundamental solution of the negative Pell equation, and in 
fact we have 64 2 - 41 TO 2 = -4, or 32 2 -41-5 2 = -1 and 37 2 -37- 10- 10- 10 2 = -1. 

Example 2. Let m = 221. Then m = 5 2 + 14 2 = ll 2 + 10 2 , so we have to solve 
the equations 

7x 2 + 5xy — 7y 2 — 1 or 5a; 2 + llxy — 5y 2 = 1. 

These equations can be written in the form 

(14a; + 5y) 2 - my 2 = 28 and (10a; + lly) 2 - my 2 = 44. 

Neither of these equations has a solution since (^) = (j|) = —1; thus the negative 
Pell equation T 2 - 22\U 2 = -4 is not solvable. 

Example 3. If m = 4777 = 17 • 281 = 59 2 + 4 • 18 2 = 69 2 + 4 • 2 2 , then we have to 
check the solvability of the equations 

18x 2 + 59xy - 18y 2 = 1, and 2x 2 + 69xy - 2y 2 = 1. 

For solving the first equation, observe that £ = ~ is approximately equal to one of 
the roots of the equation 18£ 2 + 59£ - 18 = 0, that is, to £ « 3.56 or to £ w 0.28. 
Using these approximations it is easy to solve the first equation by a brute force 
computation: we find (x,y) = (587,2089), hence t = |(-59a; 2 + 72xy + 59y 2 ) = 
162715632 and u = \{x 2 + y 2 ) = 2354245. 
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The second form Q = (2, 69, —2) is not equivalent to the principal form and 
generates a class of order 2. In fact, we have Q(587, — 17) = 9, so Q ~ Q\ for 
some form Qi = (3,*,*), which is not contained in the principal genus, hence 
cannot be equivalent to the principal form. Equivalently, the ambiguous form 
Q17 = (17, 17, —66) generates a class of order 2, and Gauss composition shows 
Q.Q lr ~Q 2 = (2,69,-2). 

Rational Solvability. A necessary condition for the solvability of a diophantine 
equation in integers is its solvability in rational numbers. Applied to the negative 
Pell equation fit), this gives us the classical observation that (~) = +1 for all 
primes p | m, which is equivalent to m being a sum of two squares. 

Although the solvability of Q in integers is equivalent to the solvability of one 
of the equations 
observation to 
check: 



in integers, we get stronger conditions by applying the above 
In fact, the solvability of (|6| in rational numbers is easy to 



Lemma 4. Equation has a solution in rational numbers if and only if (^) = +1 
(or, equivalently, (|) = +1) for all primes p \ m. 

Proof. Multiplying |6| through by 46 and completing the square gives (2bx + ay) 2 — 
my 2 = 4b. The fact that (^) = (|) follows immediately from the congruence 
(a + 2b) 2 = Aab mod p. 

We have to check solvability in all completions of Q. Solvability in the reals being 
clear, we have to verify local solvability in Q p for all primes p. This is equivalent 
to the triviality of the Hilbert symbol (-^) = 1 for all primes p. By the product 
formula Y[ p (^r) = 1j ^ is enough to check solvability for all primes except one. 
We will therefore show that the equation above has solutions in the completions Q p 
for all odd primes p. By Hensel's Lemma it is sufficient to check solvability modulo 
p. Now we distinguish two cases: 

p\m: Then X 2 — mY 2 represents at least one nonsquare mod p, hence all of them; 
thus X 2 — mY 2 = 46 mod p is solvable, and since gcd(a, 26) = 1, we can write 
Y = y and X = 2bx + ay. 

p | m: Then (26a; + ay) 2 ~ my 2 = 46 mod p implies (^) = +1. If conversely 
(jj) = +1, we can show solvability modulo p and in Z p exactly as above. □ 

By Gauss's genus theory, the conditions (jj) = +1 for all primes p \ m is equiv- 
alent to Qb being in the principal genus. Such forms are known to represent 1 
rationally. Solvability criteria for the negative Pell equation following from this 
criterion are due to Dirichlet, Scholz, Epstein and others. 

Special Cases. Assume that m = pq is the product of two primes p = q = 1 mod 4. 
We have already seen that Q is solvable in integers if (|) = — 1. Suppose therefore 
that (£) = -1, and write p = A 2 + AB 2 and q = C 2 + 4D 2 . Then m = a 2 + 46 2 for 
(a, 6) I (AC - ABD, AD + BC) and (a, 6) = (AC + ABD, AD - BC). By Burde's 
reciprocity law (see [29]) we have 

(^)-(^) -(!).(!), 
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Thus if (|) 4 = — (|)4, the second descendants Qb(x,y) — 1 are not solvable, 
hence neither is the negative Pell equation Q. 

If (|) 4 = (^4 = —1, on the other hand, the first descendants px 2 — qy 2 = ±1 do 

not have solutions. In fact from px 2 — qy 2 = 1 we get (|) 4 = (|)(^) 4 , and with 
y = 2 j u for some j > 1 we find (2) = = (§) = (^r) 4 - Th us the solvability 

of px 2 — qy 2 — 1 implies (-) 4 = 1. Similarly, qx 2 — py 2 = 1 can only be solvable 
if (|) 4 = 1. Thus if (|) 4 = (^) 4 = — 1, neither of the equations px 2 — qy 2 = ±1 
is solvable; but then one of the equations Qb(x,y) = 1 must have a solution. We 
have proved 

Corollary 5. Let m = pq be a product of two primes p = q = 1 mod 4. Then we 
have the following possibilities: 

(1) (2) = — 1; then is solvable. 

(2) (|) = +1; //(|) 4 = -(f) 4 , tfien is no£ sofoa&Ze. 

J / (f ) 4 = (| )' = -!> i/le ™ JS solvable. 

These results go back to Dirichlet and Scholz. It is not very hard to produce 
numerous similar results for products of three and more primes. 

Classes represented by the forms Qb- The propositions above show that if the 
negative Pell equation x 2 — my 2 = — 1 is solvable, then one of the forms Qt (where b 
runs through all integers with m = a 2 + Ab 2 ) represents 1 , hence lies in the principal 
class of the primitive binary quadratic forms with discriminant m. Our next result 
tells us exactly how the remaining forms Qb are distributed among the equivalence 
classes of order dividing 2, and that the form Qb representing 1 is unique: 

Theorem 6. Let m = p\ ■ ■ ■ p t be a product of primes pj = 1 mod 4, and let 

m = a 2 + 4b 2 (1 < j < t, aj,bj > 0) be the different representations of m as 
a sum of two squares. Then the binary quadratic forms Qj = (bj,a,j,—bj) have 
discriminant m, and there are two cases: 

(1) The negative Pell equation is solvable: then the forms Qb represent the 
2 t ~ 1 classes of order dividing 2 in Cl(m), the class group of binary quadratic 
forms with discriminant m. In particular, the form representing 1 is unique. 

(2) The negative Pell equation is not solvable: then there exists a subgroup 
C of index 2 in Cl(m)[2] such that each form Qb represents one class in 
Cl(m)[2] \ C . Each such class is represented by exactly two forms. 

In the first case, the pair (a, b) for which Qb = {b, a, —6) represents 1 is unique. 

Under the standard correspondence between classes of binary quadratic forms 
and ideal classes, the class of the form Qb — (b, a, —b) with discriminant a 2 +4b 2 = m 
corresponds to the ideal class represented by the ideal ( a+ ^" , b) . 

If m = pi ■ ■ ■ pt is the product of t prime factors pj = 1 mod 4, then m — a 2 + Ab 2 
can be written in 2 t_1 ways as a sum of two squares of positive integers. To each 
such sum we attach an ideal 

a, = (26 j + y/m, aj), 

which has the properties 

Ndj = aj, a 2 = (2b + s/m). 
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In [32] we have proved the following theorem, which is the ideal theoretic version 
of Thm. El 

Theorem 7. Let K — Q(^/m) be a quadratic number field, where m — pi ■ ■ ■ p t is 
a product of primes pj = 1 mod 4. Let e denote the fundamental unit of K . 

• If Ne — — 1, then the ideal classes [aj] are pairwise distinct and represent 
the 2 t ~ 1 classes of order dividing 2 in C1(A"). Each ideal aj is equivalent to 
a unique ramified ideal b e . In particular, exactly one of the Qj is principal; 
if aj = (a), then 

2b a + Jm 

r\ = 

or 

is a unit with norm —1 (equal to e if a is chosen suitably). 

• If Ne = +1, then there is a subgroup C with index 2 in the group C1(A)[2] 
of ideal classes of order dividing 2 such that each class in C is represented 
by two ramified ideals b e (thus C is the group of strongly ambiguous ideal 
classes in K). Each class in C1(JT)[2] \ C is represented by two ideals aj. 

The unique pair (a, b) for which Qb(x,y) — 1 is solvable in integers can be 
recovered as follows: the extension Q(^/±Sy/m ), with e > 1 the fundamental unit 
of Q(^ym) and the sign chosen as (— 1)(" 1-1 )/ 4 = (^), is a cyclic quartic extension 

with discriminant m 3 , hence equal to one of the extensions Q(-\/ m + 2by/m ) for 
m = a 2 + 4b 2 , which we have studied in [32] . 

Remarks. First traces of Prop. [3] can be found in Euler's work. In [TBI Prob. 2] 
he proved that if ap 2 — 1 = q 2 , then there exist integers b, c, /, g such that 

a = f+g 2 -, p 2 = b 2 + c 2 , q = bf + cg and ±l = bg-cf, 

and we have ax 2 + 1 = y 2 for x = 2pq and y — 2q 2 + 1. 

Euler's observation is related to our results as follows: since (b, c,p) is a Pythago- 
rean triple, there exist integers (switch b and c if necessary to make c even) m, n such 
thatp = m 2 +n 2 , b = m 2 — n 2 and c = 2mn; then ±1 = bg—cf = gm 2 — 2mnf — gn 2 , 
i.e. ±1 is represented by the binary quadratic form (<?, 2/, —g). 

Euler's results were rediscovered and complemented by Hart [22 , A. Gerardin 
PI . Sansone [351135], Epstein [TS], K. Hardy & K. Williams [H] (they first proved 
the uniqueness of the pair (a, &)), Arteha 2J. The connection with Pythagorean 
triples was also observed by Grytczuk, Luca, & Wojtowicz jTH] . 

Generalizations to other Pell equations are due to Sylvester [41], Giinther [20] . 
and Bapoungue [3 El [7] . For details, see [301 Part II]. 

3. Hilbert Class Fields 

Every number field K has a maximal unramified abelian extension L/K; the 
field L is called the Hilbert class field of K. Class field theory predicts that the 
Galois group Gal(L/A) of this extension is isomorphic to the class group C1(A). 
The maximal 2-extension contained in L/K is called the Hilbert 2-class field, and 
is isomorphic to the 2-class group Cl2(A), the 2-Sylow subgroup of C1(A). 

In this section we will present a very simple constructing of unramified cyclic octic 
extensions of complex quadratic number fields. Such constructions are known (see 
e.g. [12l H3J [26] , as well as the classical presentations [35J [36l [37]) for discriminants 
m = —Ap for primes p = 1 mod 8, but even in this case we have managed to 
drastically simplify the construction. 
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Let m = 1 mod 4 be a sum of two squares, say m = a 2 + 4b 2 . Let k = Q(s/—m ) 
denote the quadratic number field with discriminant A = —4m. The quadratic 
extension k 2 = Q(i,y/m) is unramified and abelian over Q, and is a subfield of 
the genus class field of k, which is given by k gen = Q(i, -y/qi, ■ . ■ , ■y/qt )j where 
m = qi • • • qt is the prime factorization of m. 

The quadratic unramified extensions of k have the form K = Q(\/c, \/—d), where 
m = cd is a factorization of m with c = — d = 1 mod 4. These factorizations already 
occurred in ([5]), where the factorizations m = cd with c = 3 mod 4 lead to equations 
that do not even have solutions modulo 4. 

Unramified cyclic quartic extensions of k containing k(^/d~i) correspond bijec- 
tively to factorizations A = d\d2 into two discriminants d\,d2 with (d\/p2) — 
(e? 2 /pi) = +1 for all primes pi \ di and p 2 \ d 2 . Such factorizations are called 
^-decompositions of A = —4m. In this article we deal with unramified cyclic 
quartic extensions containing k 2 = Q(i, \/rn); such extensions exist if and only if 
A = —4 • m is a ^-decomposition, that is, if and only if the primes dividing m are 
all = 1 mod 8. 

The ambiguous prime ideals 7^ (\/m) all generate ideal classes of order 2; thus 
their inertia degree in the full Hilbert 2-class field is equal to 2. This means that if 
K/k is an unramified abelian 2-cxtension, then K is the full Hilbert 2-class field if 
and only if all primes dividing A have inertia degree 2 in K/k. 




Figure 1. A piece of the 2-class field tower of <Q(^—m). 

The construction of a cyclic unramified extension k^/k containing k(i) — k(^/m) 
is classical (see [H]): we have to solve the equation 

(7) A 2 + B 2 - mC 2 = 0. 
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This equation has solutions with C = 1, namely A = a and B = 2b, where m 
n + 4b 2 . The extension k(\/a + 2bi )/k is a cyclic quartic extension unramified 
outside of 2; this extension is unramified above 2 (and thus unramified everywhere) 
if and only if b is even, which in turn is equivalent to m = 1 mod 8. 

The Galois group of ki/k is generated by the element a, whose action on the 
generators of the extension k^/k is given by the following table: 



a 


i \pm 


\/a + 2bi 


a(a) 


—i —y/rn 


yjrnj^ja + 2bi 


a 2 (a) 


i \fm 


-Va + 2bi 



We now will construct cyclic octic extensions k$/k containing k^. It follows 
from elementary Galois theory (or see [3J))) that, to this end, we have to solve the 
diophantine equation 

(8) a 2 - {a + 2bi)[3 2 - (a - 26i) 7 2 = 0. 

A solution (a, /3, 7) of this equation is called primitive if gcd(a, (3) = 1. 

Theorem 8. Let m — a 2 + 4b 2 be a sum of two squares. Then \j a + 2bi generates 
a cyclic quartic extension k^ of k — Q(\/—m ), which is unramified if and only if b 
is even. 

Assume that b is even. Then the extension k^/k can be embedded in a cyclic octic 
extension if and only if Eqn. |#|) is solvable. Let (a, /3, 7) be a primitive solution 
of Q); then the extension k% — k(\/ a + /3\/ 'a + 2bi ) is a cyclic octic extension of 
k = Q(^/—m) unramified outside of 2 and containing k^. The extension kg/k is 
unramified everywhere if and only if a + 2b = ±1 mod 8. 

The proof of Thm. [8] is done step by step. 

1. The extension k$/k is cyclic of degree 8. For proving the cyclicity of fc 8 /fc we 
use a classical result in Galois theory (see [331 Sect. 8.4*]; each of the following 
statements is completely elementary). Let K/k be a normal extension with Galois 
group G, and let L — K(^fji) be a quadratic extension. 

(1) ([331 F8.9]) Ljk is normal if and only if for every a g G there is an a a E K 
such that [i"' 1 — a 2 . 

(2) ([33J F8.10]) Let L/k be normal. Then we can define an element [f3] in 
the second cohomology group H 2 (G, ^2) with values in /12 = { — 1, +1} by 
setting 

P{u,t) = a T a a T a~l. 

(3) ([33J F8.ll]) If L/k is normal, then [/3] is the element of the second coho- 
mology group attached to the group extension 

1 > /i 2 > Gal(X/fc) > GaX{K/k) > 1. 

(4) ([33J Ex. 6, p. 142]) If K/k is cyclic of even degree, then L/k is cyclic if and 
only if a£ = —1, where a generates G — G&\{K/k) and where v = J2 t eg t - 

Set \J a ~ 2bi = \frn/\J a + 2bi, /j = a + /3y/a + 2bi and v = a + 7V a — 2bi. We 
find 

H a+1 = aa' + afi'Va - 2bi + a'fiVa + 2bi + f30'y/m = p? a 

for 

a + /3y/a + 2bi + if3'y/a - 2bi 
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where we have used a — iol and 7 = i/3' , as well as (a — 26i) 7 2 = a 2 — (a + 2bi)(3 2 . 
With a a — n a l 1 \i and v = (1 + c)(l + a 2 ) we now find 

li\ +al = -ptfy/m Ai 1+ff2 = (a - 2fo) 7 2 

/£ = ~(/3/3') 2 ™ fi" = (77') 2 ™ = — Mct 

Thus = (fi a /fi) u = — 1, which proves the claim. 

J2. 77ie extension kg/k is unramified outside of 2. This follows from a standard 
argument (see e.g. [37J[3H]): if 

a 2 - pf3 2 - // 7 2 = 0, 

then 

(9) 2{a + P^){a + 1 ^J) = {a + P^l + ^i^) 2 . 

This implies the claim because the ideal generated by a + Py/Ji and its conjugate 
a + 7v / M 7 is not divisible by any prime ideal with odd norm. 

Equation ^ is a special case of the following simple but useful observation: 

Lemma 9. Assume that Ax 2 — By 2 — Cz 2 = 0. Then 

(10) 2(xy/A + yVB)(xy/A + zVC) = {xy/A + y\/B + zVC ) 2 . 

Proof. This is a straightforward calculation. See also [32] • □ 



Corollary 10. Let m — a 2 + 4b 2 . Then y/a + 2bi and y/2o7+~2y/m) generate the 
same quadratic extension over k^. If m — p is prime and t 2 — pu 2 = — 1, then we 
also have k^ — /^(v^) f or £ — t + u^fp. 



Proof. From t 2 — mu 2 = — 1 we get 1 + t 2 — mu 2 =0, so (10) holds with A = 1, 
B = — 1 and C — m. This shows that 



2(a + 2bi)(a + y/m) = (a + 2bi + y/m) 2 
and proves the first claim. Similarly, t 2 — mu 2 + 1 = gives 
2(t + i)(t + uy/m) = (t + i + uypm) 2 . 
Nex t t 2 — mu 2 = — 1 implies t 2 + 1 = mu 2 and t — i = — i(a + 2bi)p 2 as in Sub- 



section 



2.2 



This shows that y/i(t — i) and y/a + 2bi generate the same quadratic 
extension of F = Q(i). Observe that since 2i = (1 + i) 2 is a square, we also have 

F(y/i(t=ij) = F(y/2(t=i)). a 

3. The extension k$/k is unramified above (2) if ( a 2 2b ) = 1- We choose the sign 
of a in such a way that a = 1 mod 4; since b is even, we have a = 1, 5 mod 8, and 
the following congruences hold modulo 4: 

a =1 mod 8 a = 5 mod 8 

i + y/a + 2bi \ 2 



1 + i 



= \/a + 26i = 2 + 2i + y/a + 2bi 



2 + i + y/a + 2bi 



= 2 + y/a + 2bi = 2i + y/a + 2bi 



1 + i 

In Cor. below we will show that we can always choose a primitive solution 
(a, /?, 7) of l8f in such a way that (2 + 2i) | a, f3 = 1 mod 2 and 7 = i/3 = i mod 2. 
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x mod 2 


a mod 4 


(3 mod 4 








±1 + bi 


1 


2 + 2i 


±l + (fe+2)t 



Thus in the first case we have a + f3\/a + 2bi = ±(1 + bi) mod 4, which is a square 
modulo 4 if a = 1 mod 8 and 4 | 6, i.e., if a + 26 = 1 mod 8; moreover we have 
a + (3\/a + 2bi = 2 + 2i ± (1 + (b + 2)i) mod 4, which is a square modulo 4 if 
a = 5 mod 8 and b = 2 mod 4, i.e., if a + 2b = 1 mod 8. 
This completes the proof of Thm. [8] 

A little surprisingly, the diophantine equation Q in Z[i] can be reduced to the 
following equation in rational integers (see [27j p. 76]): 

(11) Q(r,s) = br 2 + ars-bs 2 = 2x 2 . 

In fact, we claim 

Proposition 11. Let m = a 2 + Ab 2 for integers a = 1 mod 2 and 6. Then the 
following statements are equivalent: 

1) Equation |5|) is solvable. 

2) I 2 ^] = 1 for all 7T | (a - 2bi); 

3) TTie primes p \ m have inertia degree 1 in Q(i, + 2&i ) 

4) (y ) = +1 for all primes p \ m. 



5) Equation (11) is solvable 



Proof. For proving that 1) =>■ 2), recall that ternary quadratic equations such as 
^ are solvable globally if and only if they are everywhere locally solvable. Since 
we may disregard one place because of the product formula, all we need to check 
is solvability at the primes dividing a ± 2bi. This proves the equivalence of 1) and 
2); the third statement is a translation of the second using the decomposition law 
in quadratic extensions. 

Next we claim that [ a+ ^ hl ] = (^) for every prime it \ (a — 2bi) with norm p; this 
shows that 2) and 4) are equivalent. To this end, observe that 2bi = a mod tt; this 
shows that [ a+ 7r 2fez ] = [^] = [^] = (y), where we have used simple properties of 
residue symbols (see [2H1 Ch. 4]) and the fact that 2i = (1 + i) 2 is a square. 



Finally we prove that 4) and 5) are equivalent. To this end we observe that ( 11 ) 
is solvable in the rationals if and only if it is solvable everywhere locally. We may 
omit proving solvability in Q2 by the product formula. Now br + ars — bs 2 = 2x 2 
can be written in the form (2br + as) 2 — ms 2 — 8bx 2 ; this norm equation is solvable 
if and only if (f) = +1 for all p \ m. □ 



The fact that i8h and (11) arc simultaneously solvable suggests that there exists 



an algebraic relation between its solutions. Such a relation does indeed exist: 
Lemma 12. Let Q = Qb = {i>, a, —b) be a quadratic form with discriminant m 



a 2 + 4b 2 . Lf \11) has a solution in nonzero integers, then 
(12) a = 2x(l + i), /3 = r + si, j = s- 

satisfy Equation Moreover, gcd(r, s) \ gcd(a, /3). 
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Proof. We find 



a 2 = 8x 2 i, 



(a + 2bi)f3 2 = (a + 2bi)(r 2 - s 2 + 2rsi) 



a(r 2 
a(r 2 



s 2 ) - Abrs + Q(r, s) ■ bi 



s 

(a - 2bi)^ 2 = -a(r 2 - s 2 ) + Abrs + Ax 2 i, 

which immediately implies the first claim. 

Clearly the square of gcd(r, s) divides 2a; 2 , hence gcd(r, s) | x. This implies 
gcd(r, s) | gcd(a, (3, 7) via §12$. □ 



Abrs + Ax i, 



Observe that we do not claim that every solution of (|8| comes from a solution 
of (111 via the formulas ( 12 1. 



Corollary 13. Replacing b by —b if necessary we can always find a solution (a, /?, 7) 
of |#|) such that (2 + 2i) \ a, /3 = 1 mod 2 and 7 = i mod 2. In this case, we have 
a = (2 + 2i)x mod A and (3 = ±1 + (b + 2x)i mod 4. 

Proof. Assume that br 2 + ars — bs 2 = 2x 2 has a solution, which we assume to be 
primitive (gcd(r, s) = 1); since b is even and a is odd, we must have 2 | rs. If r is 
even, replacing b by — b and (r, s) by (s, — r) we get a primitive solution in which s 
is even. 

Thus we may assume that r is odd and s is even. Reducing br 2 + ars — bs 2 = 2x 2 
modulo 4 shows that 2x 2 = b + s mod 4, which implies s = b + 2x mod 4 as claimed. 
The other claims follow from Lemma [12] Q 

We now give some explicit examples. 

The Case m = p for primes p = 1 mod 8. If m — p is prime, then [ °^ 2 ^ ] — 



(^) = 1 if and only if p 



1 mod 8. Here are a few examples: 



p 


/i 


a + 


2bi 




a 


P 


7 




l 1 


17 


4 


U 


-4i 


2 


+ 2i 


1 


i 


2 + 


2i + VI + 4i 


41 


8 


54 


-Ai 


2 


+ 2i 


1 


i 


2 + 


2i + \/5 + 4i 


73 


4 


-3 


+ 8i 


G 


~ 6i 


l4-2i 


2-i 


6-6i + 


(1 4- 2i)V-3 4- 8i 


89 


12 


54 


-8i 


10 


+ lOi 


3 + 2i 


2 + 3i 


10 + lOi 


+ (3 + 2i)y/5 + 8i 


97 


4 


94 


-Ai 


2 


+ 2i 


1 


i 


2 + 


2i + ^9 + Ai 



The extension kg — k^^/Jl) is unramified outside 2, and unramified everywhere 
if and only if ft, = mod 8 (or, equivalently, if a + 2b = ±1 mod 8). The first few 
examples of unramified extensions are 



p 


h 


a + 2bi 




a 


P 


7 






M 


41 


8 


5 + Ai 


2 


+ 2i 


1 


i 


2 


+ 2i 


4- V5 4- Ai 


113 


8 


-7 + 8i 


2 


+ 2i 


l + 2i 


2 + i 


2 + 2i 


+ (1 


+ 2i)V-7 4-8i 


137 


8 


-11 + 4z 


2 


+ 2i 


1 


i 


2 + 


2i + 


V-114-4? 


257 


16 


1 + m 


4 


+ Ai 


1 


i 


4- 


lAi - 


1- Vi 4- m 
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The Case m = pq for primes p = q = 1 mod 8. In this case, the class of (2, 2, n) 
with n = ~ p<? is a square. Since the forms (p,0,q) are not equivalent to (2,2, n), 
the class group contains a subgroup of type (2,4). It contains (4,4) if and only if 
the class of (p, 0, q) is a square, which happens if and only if (|) = 1. 

Case A: (|) = —1. In this case, the 2-class group has type (4, 2), the square class 
being generated by (2,2, ro). Since 2 splits in the three quadratic extension k(i), 
k(yfp) and k(^/q), one of them can be embedded into an unramificd ^-extension. 
By Redei-Reichardt, this ^-extension is generated by the square root of a + 2bi, 
where m = a 2 + 46 2 . 

Writing m = c 2 + Ad 2 as a sum of squares in an essentially different way does 
not produce anything new because of 

k 2 (Va + 2bi) = k 2 (\/p(a + 2bi) ) = k 2 (Vc + 2di). 

Since (2) = —1, this implies that exactly one among the two equations of type (|6j) 
has a solution. 

The unramified extension k 2 (^/p, Va + 2bi ) of type (2, 4) over k is the full Hilbert 
2-class field if and only if ( a 2 2b ) = — 1. Observe that ( a 2 2b ) = ( e _r 2 <j ) since 2 splits 
in both or in neither of the two quartic extensions. 



p 


q 


Cl(-4pq) 


generators 


(6, a, - 


-b) 


f 2 ) 

\a+2b> 


(r, s, x) 


17 


41 


(4,2) 


(19,10,38) 


(8,21, 


-8) 


-1 


(1,0,2) 








(29,24,29) 


(12,11, 


-12) 


-1 




17 


73 


(16,2) 


(3,2,414) 


(2,35, 


-2) 


+ 1 


(1,0,1) 








(17,0,73) 


(10,29, 


-10) 


+ 1 




17 


97 


(24,2) 


(3,2,550) 


(16,25, 


-16) 


+ 1 


(1,2,1) 








(17,0,97) 


(20,7,- 


-20) 


+ 1 




17 


113 


(20,2) 


(35,-4,55) 


(18,25, 


-18) 


-1 


(5,-2,8) 








(17,0,113) 


(10,39, 


-10) 


-1 




41 


89 


(20,2) 


(31,6,118) 


(10,57, 


-10) 


-1 


(6,-1,2) 








(65,48,65) 


(30,7,- 


-30) 


-1 




41 


97 


(28,2) 


(3,2,1326) 


(8,61, 


-8) 


-1 


(1,0,2) 








(41,0,97) 


(28,29, 


-28) 


-1 





Case B: ( £ ) = +1. Let m = pq = a 2 +4b 2 . Writing n = ai+2b\i and p = a 2 + 2b 2 i 
we find irp — a\a 2 — Ab\b 2 + 2{a\b 2 + a 2 b\)i and np = a\a 2 + Ab\b 2 + 2{a\b 2 — a 2 b\)i. 
Since [f] = 1 etc., we find [f ] - [|] - [£] = (f) 4 (§) 4 . This shows that the 
solvability conditions [ a+2bt ] = +1 are equivalent to (-) 4 (-) 4 = 1. 

Note that (^) = [^] = (A) 4 (M ) 4 , where (f ) A =\-l)i^)^ for integers 
m = 1 mod 8. 

Theorem 14. Assume that m = pq — a 2 + 4b 2 is the product of two primes p = q = 
1 mod 8 with (^) = 1. Then the quartic extension k(yja + 2bi )/k can be embedded 
into an unramified cyclic octic extension if and only */(^) 4 (^?) 4 = (|) 4 (p) 4 = 1- 
More precisely, the following statements are true: 

(1) The primes above 2 split in the quartic extension fc(V 'a + 2bi )/k if and only 

(2) Equation 13) is solvable if and only if (|) 4 (^) 4 = 1- 
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(3) The equation Q(r,s) — 2x 2 , where Q — (b,a,—b), is solvable in integers if 
and only i/(|) 4 (|) 4 = 1. 

(4) The cyclic octic extension kg/k constructed from a solution of is un- 
ramified above the primes dividing (2) if and only 2/(^)4(^)4 = 1. 

Proof. The condition (|) = 1 is equivalent to ( aifc2 + a2bl ) = 1, which by Burde's 
rational reciprocity law is equivalent to (|) 4 (p) 4 = 1- D 

In the table below, e denotes the values of (|) 4 and (|) 4 , respectively. 



p 


q 


C1(-4 M ) 


generators 


(M>- 


-b) 


(a+2b) 


e 


(r, s, x) 


17 


89 


(4,4) 


(11,8,139) 


(14,27, 


-14) 


+ 1 


-1 










(19,16,83) 


(6,37, 


-6) 


+ 1 


+1 




17 


137 


(8,4) 


(5,2,466) 


(24,5,- 


-24) 


-1 


-1 










(35,-8,67) 


(20,27, 


-20) 


-1 


+1 




41 


73 


(12,4) 


(3,2,998) 


(26, 17, 


-26) 


-1 


+1 










(29,-18,106) 


(14,47, 


-14) 


-1 


-1 




41 


113 


(8,4) 


(7,2,662) 


(34,3,- 


-34) 


+ 1 


-1 










(23,-12,203) 


(6,67, 


-6) 


+ 1 


+1 




73 


89 


(8,8) 


(19,2,342) 


(32,49, 


-32) 


+ 1 


+1 


(1,0,4) 








(26,-18,253) 


(8,79, 


-8) 


+ 1 


+1 


(1,0,2) 



The cyclic quartic extensions of Q(-\/— 17 • 137 ) are generated by 
V5 + 48l V -51 + 4VT7, V -3699 + Siev'm 



Since (1 + i) is inert in Q(v5 + A8i )/Q(i), this extension cannot be embedded into 
a cyclic quartic unramified extension by Thm. 14 (1). Similarly, 1 + Ai is inert in 
this extension since [-y^j] = (yf) = — 1. 



Let us now make a few simple remarks on special cases where the equation 



bi- 



bs 2 



2x z 



(13) 
is solvable. 

(1) b — 2d 2 : then (r,s,x) — (b,a,bd) is a solution. Note that p 
a 2 + (2d) 4 in this case. 

(2) b — d 2 : then (r, s, x) — (2b, a + e, /) is a solution, where p = 1 

4. 2-Descent on Elliptic Curves 



Ab 2 



2f 2 



In this section we will give an exposition of Apery's lecture pQ. The forms Qb also 
show up in several other investigations of elliptic curves with primes p = a 2 + Ab 2 as 
parameters (see e.g. [ID]), and we have selected Apery's article mainly because his 
presentation was the least polished. Apery starts by recalling a conjecture made 
by Mordell in Debrecen 1968: for each prime p = 5 mod 8, the curve 

(14) y 2 =px 4 + l 

has a nontrivial (i.e., (x,y) 7^ (0,±1)) rational point (this is also predicted by the 
more general parity conjecture). Since (|14[) is a curve of genus 1 with a rational 



point, it is an elliptic curve. The conjecture that (14) has nontrivial rational points 



is equivalent to the conjecture that the elliptic curve has Mordell- Weil rank 1. 
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Consider more generally an elliptic curve 

E:y 2 = x(x 2 + Ax + B) 

defined over Q with a rational torsion point (0, 0) of order 2. Each rational affine 
point on E has the form (x, y) with 

m mn 
e e J 
and comes from a rational point on one of the torsors 

rrt 2 j, 4 i 22,1,4 

1 : n — 0\m + am e + b^e. 

with &1&2 = B and 6i squarefree. 
The curve 

E' : y 2 = x(x 2 +A'x + B'), with A' = —2Ax and B' = A 2 - 4B, 

is 2-isogenous to 

Specializing to ^4 = and B = p wc find that the elliptic curves 

(15) E : y 2 = x(x 2 + p) and £" : y 2 = xix 2 - 4p) 

have the torsors 

2 44 i 2 4*4 2 4*4 

n = pm + e and n = m — 4pe , n — pm — 4e . 



By the theory of 2-descent on elliptic curves, (151 has rank r < 1, with equality if 
and only if the torsor n 2 — pm 4 — 4e 4 has a nontrivial rational point. 
Now consider the torsor 

Z 2 = pX A - 4F 4 
(we are using Apery's notation) and write p = a 2 + 4b 2 . From 
pX 4 = Z 2 + AY A = (Z + 2iY 2 )(Z - 2iY 2 ) 
we get, using unique factorization in Z[i], 

Z + 2iY 2 = (a + 2bi)(£ + ir)) 4 , 
where X = £ 2 + r] 2 . Comparing real and imaginary parts yields 

(16) Y 2 = 6(C 4 - 6£V + rj 4 ) + 2a(n(f - if). 
Setting r = £ 2 — rj 2 and s = 2£r), we find 

(17) Jf 2 = r 2 + S 2 , Y 2 = br 2 + ars-bs 2 . 

Given the last pair of equations we parametrize the Pythagoren equation X 2 = 
r 2 + s 2 via r = £ 2 — n 2 , s = 2£n and X = £ 2 — rj 2 , plug the results into the second 
equation and retrieve (16). 

Thus finding a rational point on E boils down to finding a simultanous repre- 
sentation of squares for the pair of forms Q = (1, 0, 1) and Qb{b, a, —6). 

Example. For p = 797, we have a = 11 and b = 13. We find 

f= 1462 rj= 771 

X = 2731885 Y = 1773371 

5948166935620325 458544116976814482315845 

y = 



3144844703641 ' 5576976396940543811 

xz 



since x = p^? and y = pM, where Z = 210600981540301 
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5. Cyclic Quartic Fields 

In the late 1940s, Hasse was interested in the explicit arithmetic of abelian 
extensions; in 1948 he presented a memoir |23| on the computation of unit groups 
and class numbers of cyclic cubic and quartic fields, and in 1952 he published his 
book [24] on the investigation of class numbers of abelian number fields. 

The quadratic form Qj, shows up in Hasse's treatment of cyclic quartic number 
fields in |23| . Since this work has remained largely obscure we would like to provide 
as much background as is necessary to begin to appreciate Hasse's results. 

Let K/Q be a cyclic quartic extension; let F denote its conductor, and H the 
subgroup of the group D of nonzero ideals in Q coprimc to F that corresponds to 
this extension by class field theory. Thus D/H ~ Gal(K/Q); let \ be the ray class 
character on D/H, and T = — x(t)~ le (t) the corresponding Gauss sum. 

Let k denote the quadratic subfield of K; its conductor / divides F, hence we 
can write F = fG for some integer G. Hasse proves that there exist integers a, b 
such that / = a 2 + 46 2 and 



K = Q[\l x (-l)G f -^l 



His first main result is a description of an integral basis of K in terms of invariants 
of the field, that is, in terms of Gauss sums. If r denotes the Gauss sum attached 
to x 2 , then the algebraic integers in k have the form \{x + yr) with x = ry mod 2. 
Hasse succeded in determining the ring of integers in if in a similar way. In fact, for 
elements x £ k and y £ Q(i) he observes that every element of K can be represented 
in the form 

[x,y] = -^x + — 

where y denotes the complex conjugate of y and where T — x(— 1)T. 

The ring of integers in K consists of all elements [x, y) with x € Ok and y £ Z[i] 
such that 

^,Tr(^) +T r(^)r 
2 



where Tr denotes the trace of Q(i) 

Now Hasse observes that the product x(yT + yT) can be written in the form 

x(yT + yT) = (x o y) T + x o y T, 

where 

x y + x 1 (a - 2bi)y 1 
x o y — , with x = 2^- x ° x i T ) an( l V <£>[i\- 

This defines an action of k x on Q(i) x (which induces an action of Ok on Z[i]); in 
fact, the operator product x o y has the following formal properties: 

Lemma 15. For all x € k x and all y G Q(i) we have 

(1) loy = y. 

(2) (xiar 2 ) o y = x x o (x 2 o y). 

(3) x o y is Q-bilinear: qx o y — x o qy = q(x o y) for all q £ Q. 

(4) x o iy — i[x' o y) ; where x' is the conjugate of x. 

(5) x o y = if and only if x — or y = 0. 
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Hasse uses this action for simplifying the numerical computation (he was working 
with pencil and paper!) of products in the number field K. The computation of 
squares, for examples, is facilitated by the observation that 



+x(-l)G ),Xoy 



where N and S denote the trace in Q(i)/Q and where <f> is the binary quadratic 
form defined for y = r + si by 

4>{y) = ~S((a + 2bi)y 2 ) = ar 2 - Abrs - as 2 . 

In the expressions giving the action of the Galois group on [x,y], the form 

(j)(y) = ——S(i(a + 2bi)y 2 ) = br 2 + ars — bs 2 

shows up, for which Hasse observes the identity (see [22 (19)] 

(j>(aoy) = N(a)(j>(y) 

for a £ Ok and y £ Z[i]. 

Hasse's goal was characterizing the unit groups of cyclic quartic extensions in 
a way similar to the real quadratic case, where the fundamental unit is uniquely 
determined by the minimal solution of the Pell equation T 2 — mil 2 = 4. 

In the real cyclic case K/Q, let k denote the quadratic subfield of K. The unit 
group Ek of K is described by the following invariants: 

(1) the unit group Ek of the quadratic subfield, 

(2) the group E^/k of relative units satisfying Nx/kV — ilj an d 

(3) the unit index Q = (Ek '■ Ex/kEk)- 
These invariants are characterized as follows: 

(1) The unit index Q is either 1 or 2; 

(2) There is a unit r\ such that the group E K / k is generated by —1, r\ and its 
conjugate rj '. 

This unit r\ can be chosen in an essentially unique way among its conjugates etc., 
and this unit is then called the relative fundamental unit of K. Hasse's main result 
is 

Theorem 16. The relative fundamental unit rj of K is the relative unit e 7^ ±1 
with the property that \Sk/q(e )| is minimal. 
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